streammack

[The Hacker News @TheHackersNews]

‼️ Warning: A malicious PDF can trigger controlled memory corruption in Apple CoreGraphics.

Apple says CVE-2026-86950 may have been used in targeted attacks.

The first public PoC is now out, while WhatsApp PDF checks hint at a possible delivery path that remains unconfirmed.

Details → https://t.co/d8GgV4x5Hp

[Mr.Niko @_MrNiko]

iMessage EXR. zero click. heap overflow before the banner finishes.

CVE-2026-86869. libAppleEXR sizes the buffer for 3 channels. 12 bytes.
CompressedInterleave4 writes 4. 16 bytes. every pixel.
three of those four bytes come from the file.

BlastDoor never decodes EXR.
Spotlight and the photo indexer do, later, with SDR hardcoded on.
no tap. same ImageIO path on iPhone, iPad, and Mac.

fixed in the 27 releases. older fleet still sits on it.
credit: Niels Hofmans / ironPeak
https://t.co/viusjHmr47

#iOS #ExploitDev #InfoSec

[Muqsit 𝕏 @mqst_]

Modern iOS Security Features – A Deep Dive into SPTM, TXM, and Exclaves

Paper: https://t.co/NZiKJ6JMLr

Author: Moritz Steffin and Jiska Classen

[Blacktop @blacktop__]

Did you know that `ipsw` has had a secret sandbox decompiler hidden in it for ~4 years? 🤫 Well now it's public 🙌

Check it out and let me know what you think! 🎉

https://t.co/lcp1K6l8IE

[mthcht @mthcht2]

🧅 TOR archive feed:
https://t.co/6KYeJyyMyC

Every IP that has ever been a TOR node!
Searchable with full timeline, exit/guard/middle role, country, ASN, updated hourly since 2024.

[Sahil Choudhary @sahilsince2000]

No jailbreak. No problem. 🔓

I built a tool that bypasses iOS SSL Pinning using OpenVPN + iptables — works with Burp Suite & mitmproxy out of the box.

👇 GitHub
https://t.co/N4QyCDaXvR

#CyberSecurity #BugBounty #iOS #Pentesting

[hiphoponelove @hiphoponelove_]

here we go again, new iOS full-chain exploit dubbed DarkSword targeting entities in Ukraine, Saudi Arabia, Turkey, and Malaysia via compromised domains

https://t.co/zWFnWEWN6p , https://t.co/AQuWwplZKz , https://t.co/ILXIHVESZG

[Mateusz Krzywicki @krzywix]

In collaboration with Lookout and Google (thank you 🙏) we have been working on tearing down and building detections for DarkSword - iOS exploit chain for iOS 18.4 - 18.7. Super excited for this research 🎉. Please update your iPhones.

https://t.co/dvXZUe8F3b

[Clandestine @akaclandestine]

Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter - Quarkslab's blog https://t.co/l2HZCDk0HY

[ONE Jailbreak @onejailbreak_]

🔖Coruna iOS exploit toolkit leaked. Extracted from sadjd.mijieqi[.]cn/group.html and partially deobfuscated🧾

Tested chains:

- iPhone 6s+ (15.4.1)
- iPhone Xs Max (16.5)
- iPhone 15 Pro Max (17.0)

https://t.co/kvqQ2pQe1E

[Lμke Switzer @LukeSwitzer_]

Roaming AntiHunter spotted in the wild ⚔️

DIGI Node- Deployable and affordable. Scalable mesh connected 2GHz awareness.

GitHub: https://t.co/pkVnunCN6z

Credit @NitekryDPaul

[Nicolas Krassas @Dinosn]

[0day] From Spotlight to Apple Intelligence https://t.co/XnRu3QGkHy

[Mickey Jin @patch1t]

For those missing the talk,
Blog: https://t.co/XBvFMbsfi0
Slides: https://t.co/krDj6hHuXm

[Dinesh Shetty @Din3zh]

CVE-2025-24103 : General TCC Bypass - https://t.co/xuSreI58Iu

by @guluisacat #infosec #Apple #DFIR

[Florian Hansemann @CyberWarship]

''Full Chain Baseband Exploits, Part 3''

#infosec #pentest #redteam #blueteam
https://t.co/YMzKJ4tp10

[xvonfers @xvonfers]

Full Chain Baseband Exploits.
Details of the baseband and baseband-to-AP pivot vulnerabilities, exploitable for RCE, chained together at the same time
▶️Part 1: https://t.co/dpuDI33JhF
▶️Part 2:https://t.co/rJajpOgMdZ
▶️Part 3: https://t.co/aZVUj8GY6c

@TaszkSecLabs @kutyacica

[Mr. OS @ksg93rd]

#exploit
1. Dissecting CVE-2024-12695:
Exploiting Object.assign() in V8 - https://t.co/eQOStfhBgF

2. CVE-2025-34508:
ZendTo Path Traversal - https://t.co/lWpzuAs9yH

3. Breaking V8 Sandbox with Trusted Pointer Table - https://t.co/QV2hgrEyXC
]-> PoC - https://t.co/tpa6hIr6IJ